Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/05/19 2:36 p.m.•30 views

Algernon: handler.lua discovery walks parent directories above the server root

Summary When Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute as the request handler. The loop terminates only after 100 ancest...

9CVSS8.6AI score0.00744EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2026/05/19 2:36 p.m.•24 views

GHSA-XWCR-WM99-G9JC Algernon: handler.lua discovery walks parent directories above the server root

Summary When Algernon is asked for any URL path that resolves to a directory without an index file, DirPage walks upward through parent directories — past the configured server root — looking for a file named handler.lua to execute as the request handler. The loop terminates only after 100 ancest...

9CVSS8.6AI score0.00744EPSS
SaveExploits0References2
Rows per page
Query Builder